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ABSTRACT 



A proxy server shares a plurality of modems connected to a 
wide area network among multiple client computers con- 
nected to a local area network. Each of the client computers 
on the local area network is assigned a local address while 
each of the plurality of modems is assigned a modem port 
address valid on the wide area network. In one embodiment, 
a processor controls address substitution allowing multiple 
client computers to share modems when communicating to 
host computers in a wide area network. The processor 
creates a descriptor list to keep track of the connections 
between the client computer and host computers on the wide 
area network and uses the descriptor list to determine to 
which client computer an incoming data packet should be 
sent. The processor also creates a proxied application list to 
determine if an outgoing data packet, received from one of 
the client computers, is one to be proxied through the proxy 
server. 



21 Claims, 8 Drawing Sheets 



A statutory invention registration is not a patent. It has 
the defensive attributes of a patent but does not have the 
enforceable attributes of a patent. No article or adver- 
tisement or the like may use the term patent, or any term 
suggestive of a patent, when referring to a statutory 
invention registration. For more specific information on 
the rights associated with a statutory invention registra- 
tion see 35 U.S.C. 157. 
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PROXY SERVER 

COPYRIGHT NOTICE/PERMISSION 

A portion of the disclosure of this patent document 
contains material which is subject to copyright protection. 
The copyright owner has no objection to the facsimile 
reproduction by anyone of the patent document or the patent 
disclosure as it appears in the Patent and Trademark Office 
patent file or records, but otherwise reserves all copyright 
rights whatsoever. The following notice applies to the soft- 
ware and data as described below and in the drawing hereto: 
Copyright © 1997, Multi-Tech Systems, Inc., All Rights 
Reserved. 

FIELD OF THE INVENTION 

The present invention is related to network servers and in 
particular to a proxy server. 

BACKGROUND OF THE INVENTION 

Traditionally, connecting networked computers to the 
Internet required establishing a dial-up connection for each 
network computer, or a dedicated line or frame relay con- 
nection shared by all network computers. Individual dial-up 
connections optimize bandwidth and connection time while 
a dedicated connection provides the easy extension of Inter- 
net resources to newly added network computers. Each 
approach has major drawbacks, however. 

Each networked computer using an individual dial-up 
connection requires an unique account with an Internet 
Service Provider (ISP), its own phone line, and a modem, in 
addition to the hardware necessary to connect the computer 
to the network. The cost of the modems, phone lines, and ISP 
accounts quickly becomes prohibitive in a small to medium 
sized network. 

A dedicated connection eliminates the cost burdens of 
individual dial-up connections since the dedicated connec- 
tion utilizes the hardware necessary to connect the computer 
to the network. The drawbacks to a dedicated connection are 
the cost of the dedicated connection, the cost of the equip- 
ment necessary to connect the network to the dedicated 
connection, and the additional overhead associated with 
managing the network and securing the network from 
unauthorized, external access. 

Therefore, there is a need to connect network computers 
to the Internet without incurring the cost burdens associated 
with either individual dial-up accounts or a dedicated con- 
nection while incorporating the benefits of both approaches. 

SUMMARY OF THE INVENTION 

A proxy server shares a plurality of modems connected to 
a wide area network among multiple client computers con- 
nected to a local area network. The proxy server comprises 
the plurality of modems, a local port connected to the local 
area network, and a processor connected to the local port and 
to the modems. Each of the client computers on the local 
area network is assigned a local address while each of the 
modems is assigned a modem port address. The local port 
receives outgoing local packets destined for the wide area 
network from the client computers and sends incoming local 
packets from the wide area network to the client computers. 
The modems transmit outgoing remote packets and receive 
incoming remote packets to and from the wide area network. 
When the processor receives an outgoing local packet from 
one of the client computers through the local port, the 



2 

processor selects one of the modems and substitutes the 
modem port address of the selected modem for the local 
address of the client computer in the outgoing local packet 
to create an outgoing remote packet. The processor transmits 

5 the outgoing remote packet to the selected modem for 
transmission to the wide area network. When the processor 
receives an incoming remote packet from a modem, the 
processor determines a destination client computer for the 
incoming remote packet, and substitutes the local address of 

10 the destination client computer for the modem port address 
of the modem in the incoming remote packet to create an 
incoming local packet. The processor transmits the incom- 
ing local packet to the destination client computer through 
the local port. The processor creates a descriptor list to keep 

is track of the connections between the client computer and 
host computers on the wide area network and uses the 
descriptor list to determine to which client computer an 
incoming remote packet should be sent. The processor also 
creates a proxicd application list to determine if an outgoing 

20 local packet is one to be proxied through the proxy server. 
The structure of the descriptor list and the proxied appli- 
cation list are described in detail as are the processes 
performed by proxy server software which causes the pro- 
cessor to perform as summarized above. Additionally, vari- 

25 ous algorithms used to select a modem are also described. 
Because the proxy server shares multiple modems among 
the computer of a local area network, the number of phone 
lines, modems, and ISP accounts are greatly reduced while 
maintaining the benefits of using only the amount of band- 

30 width needed at one time associated with dial-up Internet 
accounts. Furthermore, the proxy server allows easy con- 
nections of new client computers to the Internet but without 
the overhead associated with a dedicated connection. 
Additionally, because the proxy server translates between 
non-registered local area network addresses and valid Inter- 
net addresses, the local area network is secured against 
unauthorized, external access. 

BRIEF DESCRIPTION OF THE DRAWINGS 

40 

FIG. 1 A is a block diagram of one embodiment of a proxy 
server of the present invention. 

FIG. IB is a block diagram of communications flow in the 
proxy server shown in FIG. 1A. 
45 FIG. 2 is diagram of one embodiment of a packet header 
used by the proxy server of FIG. 1A. 

FIG. 3 is a diagram of one embodiment of a proxied 
application list used by the proxy server of FIG. 1A. 
5 o FIG. 4 is a diagram of one embodiment of a descriptor list 
used by the proxy server of FIG. 1A. 

FIG. 5 A is a flow chart of processes performed by the 
proxy server of FIG. lAin response to receiving an outgoing 
packet. 

55 FIG. 5B is a flow chart of processes performed by the 
proxy server of FIG. 1A in response to receiving an incom- 
ing packet. 

FIG. 5C is a flow chart of process performed by the proxy 
server of FIG. 1A to select a port for outgoing packets. 

FIG. 6 is a diagram of one embodiment of a status list 
used by the proxy server of FIG. 1A. 

DESCRIPTION OF THE EMBODIMENTS 

65 In the following detailed description of the embodiments, 
reference is made to the accompanying drawings which 
form a part hereof, and in which is shown by way of 
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illustration specific embodiments in which the invention When a user invokes an Internet application 125 on the 

may be practiced. These embodiments are described in client computer 123, the application 125 sends a data stream 

sufficient detail to enable those skilled in the art to practice 126 to a corresponding communications protocol stack 127 

the invention, and it is to be understood that other embodi- on the client computer 123. For example, data streams from 

ments may be utilized and that structural, logical and elec- 5 a Worl( j Wide Web browser or a FTP/TFTP (File Transport 

trical changes may be made without departing from the spirit Pro tocolArivial File Transport Protocol) session are directed 

and scope of the present inventions. The following detailed t0 a TCP/IP slack> The otocol stack ni creatcs outgo ing 

description is, therefore, not to be taken in a limiting sense, (local) packets 128 from the data ^ laces the ^ 

and the scope of the present inventions is defined only by the packets 128 on the LAN 121 for routing to their destination. 

appended claims. . . L 10 The proxy server 100 receives the LAN packets 128 on 

me leading digits; otrelerence numbers appearing ,n the ^ ^ 101 an(J ^ 

proxy server software 113 

Figures corresponds to the Frgure number, with the excep- determines if me data in ^lan packet 128 is to be 

tion that the same reference number is used throughout to ( e „ i . T . «/« * -„\ rf i . . . < 

- t . , . | , . , . 5 y\ : transferred to the Internet ("pro xied). Packets which are not 

refer to an idenbeal component which appears in multiple ,„ be proxied afe discarded . Because the client computer 123 

figures Signals and connections may be referred to by the 15 ^ assj d , UQj ^ add(ess which 

is not a valid 

same reterence numDer or laoei, ana me actual meaning will , mernet ad(J (he 

proxy server 100 must translate 

be clear from its use in the context of the description. between , he ^ address of the cUem ^ m an(J , he 

An overview of one embodiment of the proxy server valid Internet address of the WAN rt 103 for outgoing 

hardware and software is first described in reference to local packets which wiu ^ proxied ^ the 

FIGS. 1A and IB The particular methods performed by an 20 outgoing LAN packet 128 to an outgoing Internet (WAN) 

exemplary embodiment of the proxy server software are packel 137> the prox ^ server transfeis the ou , m 

next described in detail by reference to data structure dia- InterDet ( remot e) packet 137 to the Internet using modem 

grams in FIGS^2, 3 and 4 and a series of flowcharts shown port) 103 for deli t0 the nost computer 133. The 

in FIGS. 5x. The methods to be performed by the proxy proxy xr/el software 113 performs the reverse process 

server software constitute computer programs made up of 2s when it receives an incoming Internet packet through WAN 

computer-executable instructions. Describing the methods port 103 10 create an incommg lan packet for transmission 

by reference to a flowchart enables one skilled in the art to to tne appropriate client computer, 

develop such programs including such instructions to carry ~, ~ 

. j ., , . ... 1 ne proxy server software supports multilink operation if 

out the methods on suitable computerized servers (the IC .„ 1 _ .... . , , WT ,. 

processor of the server executing the instructions from 30 ?. C £ p ^"PP 01 ^ f suitable protocol such as ML-PPP (Multi 

computer-readable media). Ijnk , P ° lnt t0 , P ° m ' Pr ° ^ 11,6 f oal of m ] u ! tl 1 llnk °P era - 

tion ( channel bonding ) is to coordinate multiple mdepen- 

Proxy Sever Overview dent communications links between a pair of systems, thus 

The embodiment of the proxy server 100 shown in FIG. providing a virtual link with greater bandwidth than any of 

lAhas a local area network (LAN) port 101, three modems 35 the constituent members. ML-PPP protocol is used to split, 

103, 104, 105 serving as wide area network (WAN) ports, a recombine and sequence datagrams across the multiple 

command port 107, a microprocessor 109, and memory 111. logical data links to bond the multiple links into a single data 

The LAN (local) port 101 connects the proxy server 100 to transmission channel. 

a local area network 121 of client computers 121, 122, 123. The processes performed by the proxy server software 

The modems 103-105 connect the proxy server 100 to the 40 113 and supporting data structures are described next. 
Internet 131 through an Internet Service Provider (ISP). The 

ISP assigns a valid Internet address (modem port address) to Prox y Server Softwarc 

each WAN port 103-105. Proxy server software 113 (shown The proxy server software 311 of FIG. IB is next 

in FIG. IB) executing in the microprocessor 109 manages described in the general context of computer-executable 

the transfer of data packets between the client computers on 45 instructions, such as program modules, being executed by 

the LAN 121 and" host computers 133, 134, 135 on the the microprocessor 109 of proxy server 100 as shown in 

Internet 131. The command port 107 is used to configure the FIG. 1A. Although no particular structure or arrangement of 

proxy server through a non-network computer 141. program modules is required by the invention, generally the 

In an alternate embodiment, one of the WAN ports program modules include routines, programs, objects, 

103-105 serves as a dial-in connection so that a remote 50 components, data structures, etc., that perform particular 

computer can connect to the proxy server 100 without being tasks or implement particular abstract data types, 

connected to the Internet. In yet another embodiment, one of Each packet 200 received by the proxy server software 

the WAN ports 103-105 alternates between a dial-in con- from either the LAN 121 or the Internet 131 contains a 

nection and an ISP connection depending on predetermined header 201 that specifies addresses for the source 203 and 

parameters such as time of day and/or communication 55 destination 205 computers, and an application port, or 

tra ^ c - service, number 207, 209 for the source and destination 

Further alternate embodiments having more or fewer than applications that will service the data in the packet. The 

three modems are contemplated as within the scope of the header 201 also contains the transport protocol 211 used to 

invention and the applicability of the following descriptions transfer the packet, such as TCP (Transmission Control* 

to such alternate embodiments will be readily apparent to 60 Protocol) for a browser or UDP (User Datagram Protocol) 

one of skill in the art. for FTP/TFTP. Headers for packets containing systems 

, FIG. IB illustrates a single client computer 123 on the messages delivered between the client and source computers 

LAN 121 connected to a host computer 133 on the Internet using the Internet Control Messaging Protocol (ICMP) do 

121 through the WAN port 103 on the proxy server 493 100. not contain source and destination port numbers as the 

The following descriptions are also applicable to the alter- 65 messages are independent of any particular application, 

nate embodiments in which the WAN port 103 serves as a For an outgoing TCP/IP LAN packet, the source of a 

dial-in connection. packet is uniquely identified by the LAN address 203 for the 



I 
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originating, source, client computer, such as computer 123 
in FIG. IB, and the application source port number 207 for 
the application that created the packet. The destination for an 
outgoing TCP/UDP LAN packet is uniquely identified by an 
Internet destination address 205 for a host computer on the 
Internet, such as host computer 133 in FIG. IB, and a 
application destination port number 209 on the host com- 
puter. The destination address 205, destination port number 
209, LAN address 203, and source port number 207 together 
identify a particular application connection between the 
client and host computers. Similarly, the source of an ICMP 
LAN packet is the LAN address of the client computer, the 
destination is the Internet address of the host computer, and 
the ICMP connection is identified by the destination address 
and the LAN address. 

The proxy server software maintains three data structures: 
a proxied application list 300, a descriptor list 400 of open 
connections, and a status list 600. Although the data struc- 
tures are described as lists, one of skill in the art will readily 
recognize that the data structures can be embodied as 
relational data base tables, file records, operating system 
registry entries, or other well-known arrangements of data, 
and stored on computer-readable media of various types 
including random access memory, fixed disk, or CDROM. 

One embodiment of the proxied application list 300 is 
illustrated in FIG. 3. The application list 300 created when 
the proxy server software is initialized. Each entry 301 in the 
application list 300 contains the transport protocol 303 and 
the application port number 304 for an application which 
will be proxied through the proxy server. 

One embodiment of the descriptor list 400 is illustrated in 
FIG. 4. The descriptor list 400 contains an entry 401 for each 
open TCP/UDP connection. Each entry 401 is keyed on the 
destination port 406, transport protocol 407, destination 
address 408, and LAN address 409. The destination port 
406, transport protocol 407, destination address 408, LAN 
address 409, and the source port 410, are collectively 
referred to as a connection descriptor 405. The descriptor list 
400 also contains an entry 411 keyed on the transport 
protocol 416, destination address 417, and LAN address 418 
for each ICMP connection, collectively shown as connection 
descriptor 415. The mapped port number 403 and identifier 
413 shown in FIG. 4 are explained below. 

One embodiment of the status list 600 is illustrated in 
FIG. 6 and explained in conjunction with FIGS. 5 A, 5B and 
5C which describe the methods or processes performed by 
the proxy server software. Beginning with FIG. 5 A, when an 
outgoing LAN packet, such as packet 128 in FIG. IB, is 
received by the proxy server 100, the proxy server software 
determines if the packet is to be proxied (step 501). For 
TCP/UDP LAN packets, the determination is based on 
comparing the entries 301 in the application list 300 against 
the corresponding information in the packet header 200. A 
match indicates that the TCP/UDP LAN packet is to be 
proxied. In the case of ICMP LAN packets, only packets 
having a message type of "echo request" will be proxied. 
LAN packets which are not to be proxied are ignored by the 
proxy server. 

Once the determination is made that a LAN packet is to 
be proxied at step 501, the proxy server software determines 
whether the connection requested by a packet is an existing 
open connection (step 503) using the descriptor list 400 and 
the information contained in the packet header 200. If the 
corresponding information in the packet header 200 does not 
match a entry 401 in the descriptor list 400, the connection 
has not yet been opened and, therefore, must be created. 
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However, because the combination of application port num- 
ber and the LAN address in a LAN packet is valid only 
within the local area network, those values cannot be used 
to open a new connection. 

5 Therefore, the proxy server software selects an applica- 
tion port number which is not reserved or in use by the proxy 
server (step 505). For a new TCP/UDP connection (which is 
not a FTP/TFTP connection), the software creates an new 
entry 401 in the descriptor list 400, stores the appropriate 

10 information the LAN packet header 200 as the connection 
descriptor 405, and inserts the selected application port 
number into the mapped port 403 (step 507). 

If the application is FTP/TFTP, the proxy server software 
creates one entry 401 in the descriptor list 400 that corre- 

15 sponds to the connection between the client computer and 
the FTP/TFTP application port on the host computer, and a 
second entry 401 in the descriptor list 400 for the connection 
between the client computer and the data transfer port on the 
host computer. 

The proxy server software also creates an entry 601 in the 
status list 600 for a newly opened connection. The entry 601 
contains an open connection identifier 603 for the open 
connection, a physical port identifier 605 which identifies 

25 the physical port on which the open connection 
communications, and an idle timer 607. 

When the appropriate entry 401 is created or matched, the 
LAN packet converted to an Internet packet by the proxy 
server software (step 509). The mapped port 403 in the entry 

30 401 is used as the source port 207 in the packet header 200. 
Similarly, the proxy server software replaces the LAN 
address of the client computer with the Internet address of 
one of the WAN port 103-105 on the proxy server 100. The 
WAN port used for the communication is specified by the 

35 physical port identifier 605. The selection process for a 
WAN port is described in more detail below. 

If the FTP/TFTP LAN packet contains a "PORT" 
command, the proxy server software also replaces the port 
number specified in the data portion of the packet. As will 

40 be readily apparent to one of skill in the art, such a 
modification can result in a change of the packet size, so the 
software modifies appropriate sections of the header of each 
packet transferred through the FTP/TFTP connection 
accordingly. 

45 In the case of an ICMP packet, the proxy server software 
creates a new entry 411 in the descriptor list 400, stores a 
unique identifier 413 for the ICMP connection and the 
connection descriptor 415 information from the packet 
header 200. The identifier 413 is included in the ICMP 

50 packet at step 509. An exemplary ICMP packet is shown in 
Table 1 below. The identifier field shown in Table 1 is 
mapped before forwarding the ICMP packet to the Internet. 

TABLE 1 

55 — • — ^ _ 



Type 


Code 


Checksum 


Identifier 


Sequence Number 


Optional Data 



60 

Once the LAN packet has been converted to a valid 
Internet packet as described above, the proxy server soft- 
ware recomputes the appropriate checksums to complete 
65 step 509. The proxy software then transfers the converted 
packet to the Internet through the selected WAN port (step 
511). 
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Because an outgoing TCP/UDP Internet packet specifies 
the mapped port 403 as the source port 207 in its header 200, 
an incoming Internet packet on the same connection will 
specify the mapped port 403 as the destination port 209 in 
its header 200. As shown in FIG. 5B, the proxy server 5 
software matches the mapped port 403 and the protocol 211 
specified in the header 200 of the incoming Internet to the 
corresponding entry 401 in the descriptor list 400 (step 521). 
The proxy server software then replaces the destination 
address 205 and destination port 209 in the header 200 of the 10 
incoming packet with the LAN address 409 and application 
port 410 from the entry 401 (step 523). Similarly, the 
identifier in an incoming ICMP packet is used to find the 
corresponding entry 411 in the descriptor list 400 at step 
521, and the destination address 205 in the incoming packet is 
is replaced by the LAN address 418 from the entry 401 at 
step 523. The software recomputes the checksums for the 
packet to complete the conversion between Internet and 
LAN packets at step 523 and transfers the converted packet 
to the LAN for routing to the specified client computer (step 20 
525). 

The WAN port selection process is illustrated in FIG. 5C. 
In order to balance the load on the proxy's server's physical 
WAN ports, i.e., the modems, the proxy server software only 
permanently assigns a physical port to a new connection if 25 
the application, such as ICMP, requires the same source 
address for the life of the connection (step 533). For an 
ICMP connection (step 535), the proxy server software 
selects the first active port (step 537). For other applications 
that require the use of the same physical port, the proxy 30 
server selects the port with the least amount of load when the 
connection is initially established (step 539). 

For applications that do not require the same physical port 
(steps 553 and 545), the proxy server software dynamically 
selects a port each time a packet is to be sent to the Internet 35 
(step 543). The software will select the active port with the 
least amount of load. A physical port which is currently not 
active is selected when all active ports are equally loaded. A 
WAN port can be inactive because, for example, it is both a 
dial-in and Internet connection. If all ports are active and 40 
equally loaded, the software selects the first active port. 

The idle timer 607 is set to an initial value when the 
connection is opened (step 557). Each timer 607 is decre- 
mented by foreground process (not illustrated) each minute 45 
there is no activity on the corresponding connection. Activ- 
ity on the connection resets the appropriate timer 607 to the 
initial value (step 555) while a TCP "close" command (step 
551) sets the timer to an amount pre-determined to be 
adequate for the closing operations (step 553). In the case of 5Q 
an ICMP echo request message, the timer 607 is set to zero 
(step 550) when the response (step 549) is received. When 
a timer 607 reaches zero, the corresponding connection is 
closed and the descriptor entry 411 and status entry 601 are 
freed (not illustrated). 55 

A physical port can be closed by either the proxy server, 
the ISP, or due to a failed communications link between the 
proxy server and the ISP. When a physical port is closed, all 
connections using that physical port are closed and the 
corresponding descriptors and status entries freed. 60 

As described above, each client computer is assigned a 
unique LAN address. In one embodiment, such addresses 
are permanently assigned external to the proxy server. In an 
alternate embodiment, the proxy server software acts as a 
DHCP (Dynamic Host Configuration Protocol) to dynami- 65 
cally assign an address to a client computer when the client 
computer requests a connection. As the operations of a 
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DHCP server are well known to one skilled in the art, no 
detailed functional description is provided. 

The proxy server software also provides monitoring and 
management of the proxy server using a browser or Telnet 
program on a computer connected through the LAN port, the 
command port, or a WAN port. User input is received in the 
form of Telnet, HTTP, or FTP commands. When the micro- 
processor 109 recognizes that a command is addressed to the 
proxy server 100, not to a client or host computer, a security 
check is performed to ensure that the user is permitted access 
to the monitoring and management facilities of the proxy 
server software. Any results from the command are returned 
through the port on which the command arrived. Telnet, 
HTTP, and FTP commands, and the software required to 
support their operations, are well-known to one of skill and 
are, therefore, not discussed in further detail. 

Proxy Server Summary 

The proxy server has been described in terms of its 
hardware and software components, from an overview of the 
operation of the hardware and software, through detailed 
descriptions of the processes performed by the software and 
the data structures employed by the processes. It is to be 
understood that the above description is intended to be 
illustrative, and not restrictive. Many other embodiments 
will be apparent to those of skill in the art upon reviewing 
the above description. The scope of the invention should, 
therefore, be determined with reference to the appended 
claims, along with the full scope of equivalents to which 
such claims are entitled. 

Because the proxy server shares multiple modems among 
the computer of a local area network, the number of phone 
lines, modems, and ISP accounts are greatly reduced while 
maintaining the benefits of using only the amount of band- 
width needed at one time associated with dial-up Internet 
accounts. Furthermore, the proxy server allows easy con- 
nections of new LAN computers to the Internet but without 
the overhead associated with a dedicated connection. 
Additionally, because the proxy server translates between 
non-registered LAN addresses and valid Internet addresses, 
the LAN is secured against unauthorized, external access. 

What is claimed is: 

1. A proxy server for use in connecting a wide area 
network with a plurality of client computers each having a 
local address, the proxy server comprising: 

a local port connected to a local area network and opera- 
tive for sending a plurality of incoming local packets 
and for receiving a plurality of outgoing local packets 
to and from the plurality of client computers; 

a plurality of modems each having a modem port address 
and each connected to the wide area network, and 
operative for transmitting a plurality of outgoing 
remote packets and receiving a plurality of incoming 
remote packets; and 

a processor connected to the local port and connected to 
the plurality of modems, and operative for receiving 
one of the plurality of outgoing local packets from one 
of the plurality of client computers, for executing a load 
balancing algorithm and selecting one of the plurality 
of modems, for modifying the one of the plurality of 
outgoing local packets by substituting the modem port 
address of the selected modem for the local address of 
the one of the plurality of client computers to produce 
one of the plurality of outgoing remote packets, and for 
transmitting the one of the plurality of outgoing remote 
packets to the selected modem for transmission to the 
wide area network. 
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2. The proxy server according to claim 1, wherein the 
processor is further operative for receiving one of the 
plurality of incoming remote packets from one of the 
plurality of modems, for determining a destination client 
computer, for substituting the local address of the destina- 5 
tion client computer for the modem port address of the one 
of the plurality of modems specified in the one of the 
plurality of incoming remote packets to create one of the 
plurality of incoming local packets, and for transmitting the 
one of the plurality of incoming local packets to the desti- 
nation client computer through the local port. 

3. The proxy server of claim 1, wherein the processor 
selects one of the plurality of modems based on a protocol 
specified in the one of the plurality of outgoing local 
packets. 

4. The proxy server of claim 2, wherein the processor 15 
determines the destination client computer using a descriptor 
table, the descriptor table comprising an entry for each of the 
plurality of client computers having an open connection to 
the wide area network through the proxy server. 

5. The proxy server of claim 1, wherein the processor is 20 
further operative for selecting an application port, for sub- 
stituting the selected application port for a client computer 
application source port specified in the one of the plurality 

of outgoing remote packets, for determining an application 
destination port on a destination client computer, and for 2 $ 
substituting the application destination port on the destina- 
tion client computer for a destination port specified in one of 
the plurality of incoming local packets. 

6. The proxy server of claim 5, wherein the processor 
selects the application port from a group of unused remote 
application ports. 30 

7. The proxy server of claim 5, wherein the processor 
determines the application destination port using a descrip- 
tor table, the descriptor table comprising an entry for each 
open application port on each client computer having an 
open connection to the wide area network through the proxy 35 
server. 

8. The proxy server of claim 1, wherein the processor is 
further operative for classifying the one of the plurality of 
outgoing local packets and for ignoring the one of the 
plurality of outgoing local packet if the classification does 40 
not match an entry in a proxied application list. 

9. The proxy server of claim 1, wherein the processor is 
further operative for monitoring packet activity on an open 
connection between one of the plurality of client computers 
and the wide area network and for closing the open con- 45 
nection if there is no packet activity for a specified time 
period. 

10. The proxy server of claim 1, wherein the processor is 
further operative for dynamically assigning a local address 

to one of the plurality of client computers. 50 

11. The proxy server of claim 1, wherein each of the 
plurality of modems operates in dial-out only mode. 

12. The proxy server of claim 1, wherein one of the 
plurality of modems operates in dial-out and dial-in mode. 

13. The proxy server of claim 12, wherein the one of the 55 
plurality of modems operates in dial-in mode until packet 
activity through the proxy server reaches a pre-determined 
amount. 

14. The proxy server of claim 1, wherein at least two of 
the plurality of modems form a bonded channel in a coor- 60 
dinated multilink operation. 

15. The proxy server of claim 1, wherein the processor is 
further operative for determining if an incoming remote 
packet contains a proxy server management command, 
processing the proxy server management command, and 65 
sending any resulting information in an outgoing remote 
packet. 
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16. A method of sharing a plurality of modems connected 
to a wide-area network among client computers of a local 
area network comprising: 

creating a first entry in a descriptor list for each open 
connection between a client computer and a host com- 
puter on the wide area-network, the first entry including 
a first mapped port number; 

generating an outgoing packet from the client computer, 
the outgoing packet including a first portion of data, 
corresponding to the first entry, and a source address, 
the first portion of data having a source port number; 

comparing the first portion of data with each first entry in 
the descriptor list to find a first corresponding first 
entry; 

if the first corresponding first entry is found, substituting 

the first mapped port number of the first corresponding 

first entry for the source port number; 
selecting a modem from the plurality of modems using a 

load balancing algorithm; 
substituting an address of the selected modem for the 

source address ; and 
transmitting the outgoing packet using the selected 

modem. 

17. The method of claim 16, further comprising: 
generating an incoming packet from the host computer, 

the incoming packet including a second portion of data, 
corresponding to the first entry, and a destination 
address, the second portion of data having a second 
mapped port number; 
comparing the second portion of data with each first entry 
in the descriptor list to find a second corresponding first 
entry; 

if the second corresponding first entry is found, substi- 
tuting a client computer port number of the second 
corresponding first entry for the second mapped port 
number; 

substituting a client computer address included in the 
second corresponding first entry for a destination 
address; and 

transmitting the incoming packet to the local area net- 
work. 

18. The method of claim 16, further comprising: 
creating a second entry in a proxied application list for 

each application in the local area network which origi- 
nates data to be transmitted to the wide area network, 
the second entry including the source port number and 
a transport protocol; 

inserting the transport protocol in the first portion of data; 
comparing the first portion of data with each second 
entry in the proxied application list to find a corre- 
sponding second entry; and 

if the corresponding second entry is found, proxying the 
outgoing packet. 

19. A communication system, comprising; 

a plurality of client computers on a local area network, 
each client computer having a unique local address to 
differentiate from other client computers ; and 
a proxy server comprising: 

a local port connected to the local. area network and 
operative for sending a plurality of incoming local 
packets to the plurality of client computers and for 
receiving a plurality of outgoing local packets from 
the plurality of client computers; 
a plurality of modems connected to a wide area 
network, and operative for transmitting a plurality of 
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outgoing remote packets and receiving a plurality of 
incoming remote packets, each modem having a 
unique modem port address to differentiate from 
other modems; and 

a processor connected to the local port and connected 5 
to the plurality of modems, and operative for receiv- 
ing one of the plurality of outgoing local packets 
from one of the plurality of client computers, for 
executing a load balancing algorithm and selecting 
one of the plurality of modems, for modifying the 10 
one of the plurality of outgoing local packets by 
substituting the modem port address of the selected 
modem for the local address of the one of the 
plurality of client computers, to produce one of the 
plurality of outgoing remote packets, and for trans- is 
mining the one of the plurality of outgoing remote 
packets to the selected modem for transmission to 
the wide area network. 
20. A method of communication, comprising: 
receiving a request from a client computer to establish a 20 

connection to a remote server having a remote server 

address; 
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selecting a modem from a plurality of modems in 
response to the request using a load balancing algo- 
rithm; 

receiving a local data packet from the client computer; 

combining the remote server address and the local data 
packet to create a remote data packet; and 

sending the remote data packet to the remote server 
through the selected modem. 

21. The method according to claim 20, further including: 

creating an entry in a descriptor list for each open con- 
nection between a client computer on the local area 
network and a host computer on the wide area-network; 

matching data in an outgoing packet from a client com- 
puter against the descriptor list; 

substituting a mapped port in the matched entry for a 
source port in the outgoing packet; 

selecting one of the modems; 

substituting an address for the selected modem for a 

source address in the outgoing packet; and 
transmitting the outgoing packet to the modem. 
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